Basic operation of rootkit
Shell script version of rootkit
C version of rootkit
Using the rootkit to hide stuff
File hiding below the proc filesystem
Netcat remote shell
Using tcpdump as a covert communication path
SCTP remote shell
Hidden shell on /dev/tty9
Covert communication path with sshd and /var/log/auth.log
more here......http://www.jakoblell.com/blog/2014/05/07/hacking-contest-rootkit/
Shell script version of rootkit
C version of rootkit
Using the rootkit to hide stuff
File hiding below the proc filesystem
Netcat remote shell
Using tcpdump as a covert communication path
SCTP remote shell
Hidden shell on /dev/tty9
Covert communication path with sshd and /var/log/auth.log
more here......http://www.jakoblell.com/blog/2014/05/07/hacking-contest-rootkit/